aboutsummaryrefslogtreecommitdiffstats
path: root/packages/api/middlewares
diff options
context:
space:
mode:
authorMohamedBassem <me@mbassem.com>2025-08-22 18:15:06 +0300
committerMohamedBassem <me@mbassem.com>2025-08-22 21:20:37 +0300
commita64307e8ac92226581d74248b7727488ecd53465 (patch)
treeac3d57c617e4b352ca7eb142fb7c937be5531a91 /packages/api/middlewares
parentf1662b820f45a7ee89503448fc6a77085e87dc64 (diff)
downloadkarakeep-a64307e8ac92226581d74248b7727488ecd53465.tar.zst
feat: generate a random prometheus token on startup
Diffstat (limited to 'packages/api/middlewares')
-rw-r--r--packages/api/middlewares/prometheusAuth.ts33
1 files changed, 0 insertions, 33 deletions
diff --git a/packages/api/middlewares/prometheusAuth.ts b/packages/api/middlewares/prometheusAuth.ts
deleted file mode 100644
index bf35608f..00000000
--- a/packages/api/middlewares/prometheusAuth.ts
+++ /dev/null
@@ -1,33 +0,0 @@
-import { createMiddleware } from "hono/factory";
-import { HTTPException } from "hono/http-exception";
-
-import serverConfig from "@karakeep/shared/config";
-
-export const prometheusAuthMiddleware = createMiddleware(async (c, next) => {
- const { metricsToken } = serverConfig.prometheus;
-
- // If no token is configured, deny access (safe default)
- if (!metricsToken) {
- throw new HTTPException(404, {
- message: "Not Found",
- });
- }
-
- const auth = c.req.header("Authorization");
-
- if (!auth || !auth.startsWith("Bearer ")) {
- throw new HTTPException(401, {
- message: "Unauthorized",
- });
- }
-
- const token = auth.slice(7); // Remove "Bearer " prefix
-
- if (token !== metricsToken) {
- throw new HTTPException(401, {
- message: "Unauthorized",
- });
- }
-
- await next();
-});